updated README re: authentication